runner-base.Dockerfile

# Build the manager binary
FROM golang:1.20 as builder

ARG TARGETARCH

RUN apt-get update && apt-get install -y unzip

WORKDIR /workspace

# Copy API and its Go module
COPY api/ api/
# Copy tfctl and its Go module
COPY tfctl/ tfctl/

# Copy the Go Modules manifests
COPY go.mod go.mod
COPY go.sum go.sum
# Cache deps before building and copying source so that we don't need to re-download as much
# and so that source changes don't invalidate our downloaded layer
RUN go mod download

# Copy the go source
COPY cmd/runner/main.go cmd/runner/main.go
COPY controllers/ controllers/
COPY mtls/ mtls/
COPY runner/ runner/
COPY utils/ utils/

# Build
RUN CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} go build -gcflags=all="-N -l" -a -o tf-runner cmd/runner/main.go

FROM alpine:3.18

LABEL org.opencontainers.image.source="https://github.com/weaveworks/tf-controller"

ARG LIBCRYTO_VERSION

RUN apk update && \
    apk add --no-cache \
    busybox \
    ca-certificates \
    git \
    gnupg \
    libcrypto3=${LIBCRYTO_VERSION} \
    libssl3=${LIBCRYTO_VERSION} \
    libretls \
    openssh-client \
    tini

COPY --from=builder /workspace/tf-runner /usr/local/bin/

RUN addgroup --gid 65532 -S runner && adduser --uid 65532 -S runner -G runner

USER 65532:65532

ENV GNUPGHOME=/tmp

ENTRYPOINT [ "/sbin/tini", "--", "tf-runner" ]